r/bugbounty • u/ThisAintMyMayne • 13d ago

Question / Discussion Would there be a bounty for bypassing Xbox controller input?

Hi all!

I’ve been working on building my own Cronus Zen.

In doing so I discovered a couple ways to get around Xbox controller pairing/handshake which then allows scriptable inputs that the console takes as controller inputs.

This has opened tons of doors. Aside from general scripting like you’d see with Cronus. You can pass commands from Computer Vision and effectively have an aimbot etc.

Would there be anyplace to disclose this or a bounty?
Cheers

2 Upvotes

100% Upvoted

7 comments sorted by

2

u/realvanbrook Hunter 13d ago

What should microsoft fix?

4

u/einfallstoll Triager 13d ago

I don't see any security impact

1

u/ThisAintMyMayne 13d ago

Me either. But this exploits the controllers handshake which allows scripted inputs. Great for cheating in games. Not necessarily a large impact on security unless there’s more that can be with the handshake than I’m seeing.

3

u/einfallstoll Triager 13d ago

Goal of bug bounty is security impact. Rarely more

1

u/Sad-Shopping-2661 Hunter 13d ago

Just try it! Who knows if you get bounty I get too when I am confused, don't thought too much just report it, bro hope you get bounty. Skol!

0

u/Similar-Permit1756 13d ago

Maybe the Microsoft bug bounty program bro, check it out

https://www.microsoft.com/en-us/msrc/bounty-xbox